Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39302e302f32342d3234203d3e203336323336.roa
File:                     3137362e35382e39302e302f32342d3234203d3e203336323336.roa (raw, json)
Hash identifier:          IZxeoNRIYQ6PBzbJueIbgdXFQLkhrtIsdEUZSPuxca8=
Subject key identifier:   30:52:AD:3A:74:17:FE:9E:3B:12:DF:DC:F9:C8:C5:5E:CC:FD:1F:52
Certificate issuer:       /CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
Certificate serial:       52BA2171BB75523F4B97ECCE25994A2901D47B4F
Authority key identifier: EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39302e302f32342d3234203d3e203336323336.roa
Signing time:             Mon 06 Jul 2026 23:29:11 +0000
ROA not before:           Mon 06 Jul 2026 23:24:11 +0000
ROA not after:            Mon 05 Jul 2027 23:29:11 +0000
asID:                     36236
IP address blocks:        176.58.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ba:21:71:bb:75:52:3f:4b:97:ec:ce:25:99:4a:29:01:d4:7b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb2c7e62503b0634eb4ab53f88c06950ac76dcd1
        Validity
            Not Before: Jul  6 23:24:11 2026 GMT
            Not After : Jul  5 23:29:11 2027 GMT
        Subject: CN=3052AD3A7417FE9E3B12DFDCF9C8C55ECCFD1F52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:43:3d:da:75:40:49:b7:23:5f:ac:4d:bc:77:
                    40:4d:05:cd:71:cc:a9:11:e8:da:23:eb:7b:85:00:
                    20:15:ef:97:a8:82:e3:a3:e0:76:cc:06:a4:50:a4:
                    68:82:86:a7:a2:fb:d2:60:e3:f7:32:d4:dd:21:14:
                    e2:6a:ba:a5:57:e6:25:ad:38:1a:f5:05:a8:1d:99:
                    d2:59:69:d4:c5:29:27:fd:77:ef:ad:b3:53:b6:61:
                    0a:8d:5b:fa:a5:e9:c5:18:bd:82:78:4a:de:e3:24:
                    63:1b:dd:57:d9:8c:77:a0:f7:98:2f:6d:e2:b8:ed:
                    50:26:0d:35:8a:0d:55:26:56:b7:00:83:fc:24:6f:
                    0e:6e:9a:9a:c2:09:46:11:0d:a5:83:c5:be:c9:a2:
                    fe:1e:a4:79:f4:0c:e9:8d:f8:50:ac:b0:85:59:6f:
                    bf:76:f3:10:a6:bd:f0:12:f8:b2:d4:a1:e5:dd:ff:
                    fa:b9:94:75:4a:6a:6d:8a:cd:cc:58:13:ee:75:9e:
                    87:e4:40:56:1f:43:4f:91:3d:cd:85:4c:d9:46:21:
                    e2:ae:98:8b:3c:0a:3a:9e:09:ed:65:65:7b:a1:8c:
                    2e:88:88:ff:54:11:cb:43:f4:d7:1c:d0:a8:99:68:
                    1f:4e:68:76:87:d0:54:3e:3b:f0:43:5f:37:7c:f9:
                    36:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:52:AD:3A:74:17:FE:9E:3B:12:DF:DC:F9:C8:C5:5E:CC:FD:1F:52
            X509v3 Authority Key Identifier:
                keyid:EB:2C:7E:62:50:3B:06:34:EB:4A:B5:3F:88:C0:69:50:AC:76:DC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/EB2C7E62503B0634EB4AB53F88C06950AC76DCD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6yx-YlA7BjTrSrU_iMBpUKx23NE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/1/3137362e35382e39302e302f32342d3234203d3e203336323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.58.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:de:36:eb:c3:21:f9:5f:46:79:c0:5d:41:33:bf:b7:84:46:
         9b:89:87:ed:25:fb:95:77:c9:74:50:71:dc:4a:18:5f:9f:56:
         1f:71:b5:6b:e4:f3:1e:da:a8:a1:f2:a2:38:da:0b:ee:c3:63:
         94:f4:8b:05:4e:a7:2e:2b:92:bd:aa:45:6f:68:82:3e:43:bc:
         4f:2b:22:01:08:08:13:25:8c:d6:6a:06:7d:d9:86:18:b6:aa:
         e2:ad:8a:30:b4:7b:e5:82:a4:bc:e2:fa:7a:1b:7e:39:ef:ce:
         5c:bf:3a:6f:79:3d:ef:81:03:bb:c3:48:ee:72:ee:2b:2e:b8:
         c0:ea:c0:fa:60:41:09:cf:12:32:45:f5:68:ab:db:fa:77:41:
         35:45:4f:be:5f:d4:38:1d:49:43:7c:f4:4a:b7:85:b0:b1:d0:
         67:bf:aa:ae:b4:83:1a:ae:30:03:7c:c9:9c:6e:34:cf:ba:b6:
         1c:e8:c6:a2:72:e5:b8:d8:cd:ac:dc:8b:81:34:49:f5:02:1f:
         84:da:0e:a8:19:47:fa:0e:e8:b2:45:43:55:0a:a1:7c:c1:f4:
         0a:e6:d3:a7:5e:34:cb:03:51:ac:7f:dd:74:9e:d6:4f:18:9f:
         32:aa:5d:13:55:82:5b:c3:be:eb:7f:d9:47:de:f9:fd:1f:87:
         66:10:7c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:50 2026 by rpki-client